$ rpki-client -vvvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft File: 3UhfmiMRbUEQwHvThx70phTsTSw.mft (raw, json) Hash identifier: RQFypC225Q2Z2QfFnLmqwg27rEHjRFzHeRmOW8pPKVA= Subject key identifier: 13:9A:7E:1A:E2:AF:D7:40:AB:DB:F3:77:F4:5C:F1:BD:27:5A:6D:FB Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft Manifest number: BA Signing time: Sun 15 Nov 2026 07:11:31 +0000 Manifest this update: Sun 15 Nov 2026 07:11:31 +0000 Manifest next update: Sun 22 Nov 2026 07:11:31 +0000 Files and hashes: 1: 3UhfmiMRbUEQwHvThx70phTsTSw.crl (hash: W2fRlU/440p63Q8Yd0EntXBK1oJ2uvNLQjZAYPZjndE=) 2: DAC133B0C8EC11F08ED15548C4F9AE02.roa (hash: Hbt1e1dpkIGnlA91fKm5c8xCNcRrKCzjIZmrOyE5tgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 07:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Validity Not Before: Nov 15 07:11:31 2026 GMT Not After : Nov 22 07:11:31 2026 GMT Subject: CN=6af95b23-a8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:47:35:5b:54:31:3e:39:1b:95:28:b0:92: f8:64:66:cf:82:7d:3a:16:69:0e:56:fd:14:26:82: 15:8a:0c:ea:17:fe:28:e6:46:c1:a2:06:b6:47:1a: af:40:c3:b1:7f:d7:8c:4a:af:02:22:ad:75:2a:e7: 00:15:ff:c7:e5:ff:f9:7d:60:5f:76:dc:1d:a1:8f: e8:c7:df:67:cb:53:af:25:17:8e:0c:4c:80:36:40: 89:5a:0b:36:f0:83:8d:48:04:15:65:3f:7f:36:0d: c3:1c:09:e4:ff:10:48:61:40:aa:36:46:3e:f3:56: 91:65:15:24:d8:51:12:40:45:eb:eb:d4:63:ef:5e: 45:9c:38:6d:27:b9:1c:32:f9:4e:e5:f6:1a:43:5e: 34:1a:ca:8f:7f:5f:bb:fe:a5:2b:b1:49:8c:53:7e: cd:b5:69:5d:eb:6b:95:31:fb:ee:14:72:cb:b6:d3: e2:ee:b0:d1:e8:44:2c:92:e9:86:00:0c:9a:42:b2: 0b:b2:05:7d:ec:b5:ca:92:e4:71:52:2f:63:b8:81: a0:f3:2c:e2:41:40:55:61:f2:12:42:8d:ba:f5:12: c3:d2:2a:23:84:21:33:cf:1a:3e:ab:a6:a8:59:b5: 38:aa:b2:f4:d1:56:3f:b7:ba:e7:04:b9:2b:77:d4: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9A:7E:1A:E2:AF:D7:40:AB:DB:F3:77:F4:5C:F1:BD:27:5A:6D:FB X509v3 Authority Key Identifier: keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:20:5f:5d:6b:ca:75:c2:33:d2:b6:2f:3c:d0:1d:fe:e4:ae: 23:b1:44:c4:a1:8c:cc:e1:f8:d0:81:f0:59:61:45:5a:51:ea: 1d:7a:7e:df:5f:4e:78:55:79:a8:2e:0a:e4:d0:50:c6:07:1f: d3:eb:3b:bc:b1:93:14:da:c4:d3:a6:dc:a8:68:b9:1e:11:de: 44:31:54:30:34:9b:d6:c6:1c:bd:97:8f:1f:7c:64:3c:af:fd: 13:82:e1:71:8b:c4:81:70:0f:65:a0:f8:d8:03:60:94:39:89: 76:22:eb:66:f4:20:91:47:80:52:f0:91:bc:b4:f7:c4:7e:8f: e9:1e:1d:52:8f:ec:a9:48:87:f1:45:ec:7e:29:26:90:9f:9d: 36:f9:bf:56:77:d0:82:d8:98:a0:d7:03:4b:02:6a:08:81:0a: 82:67:79:80:ef:bc:e5:70:c3:a3:74:67:4f:e8:0c:f4:fc:19: 97:9b:b3:80:4a:c9:94:d4:76:f5:37:4f:72:b7:7b:a6:e6:92: 92:e2:04:57:3e:aa:ef:ad:0e:b8:e6:95:8a:a0:b5:d8:23:99: 11:d3:7f:69:36:54:bb:3e:f5:f4:b4:48:40:0d:ca:ce:ac:78: a6:8e:b1:b3:0f:6d:77:2d:60:91:6f:2c:fa:2e:3b:ec:d7:54: 55:9d:fc:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMxQUExMTAvBgNVBAUTKERENDg1RjlBMjMxMTZENDExMEMwN0JEMzg3MUVGNEE2 MTRFQzREMkMwHhcNMjYxMTE1MDcxMTMxWhcNMjYxMTIyMDcxMTMxWjAYMRYwFAYD VQQDEw02YWY5NWIyMy1hOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYZHNVtUMT45G5UosJL4ZGbPgn06FmkOVv0UJoIVigzqF/4o5kbBoga2Rxqv QMOxf9eMSq8CIq11KucAFf/H5f/5fWBfdtwdoY/ox99ny1OvJReODEyANkCJWgs2 8IONSAQVZT9/Ng3DHAnk/xBIYUCqNkY+81aRZRUk2FESQEXr69Rj715FnDhtJ7kc MvlO5fYaQ140GsqPf1+7/qUrsUmMU37NtWld62uVMfvuFHLLttPi7rDR6EQskumG AAyaQrILsgV97LXKkuRxUi9juIGg8yziQUBVYfISQo269RLD0iojhCEzzxo+q6ao WbU4qrL00VY/t7rnBLkrd9TYAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOafhri r9dAq9vzd/Rc8b0nWm37MB8GA1UdIwQYMBaAFN1IX5ojEW1BEMB704ce9KYU7E0s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzFBQS84QUZCREI2MEM4 RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlNUmJVRVF3SHZUaHg3MHBoVHNU U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVaGZtaU1SYlVFUXdIdlRoeDcwcGhUc1RTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzFBQS84QUZCREI2MEM4RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlNUmJV RVF3SHZUaHg3MHBoVHNUU3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuiBfXWvKdcIz0rYvPNAd/uSuI7FExKGMzOH40IHwWWFFWlHqHXp+319OeFV5 qC4K5NBQxgcf0+s7vLGTFNrE06bcqGi5HhHeRDFUMDSb1sYcvZePH3xkPK/9E4Lh cYvEgXAPZaD42ANglDmJdiLrZvQgkUeAUvCRvLT3xH6P6R4dUo/sqUiH8UXsfikm kJ+dNvm/VnfQgtiYoNcDSwJqCIEKgmd5gO+85XDDo3RnT+gM9PwZl5uzgErJlNR2 9TdPcrd7puaSkuIEVz6q760OuOaViqC12COZEdN/aTZUuz719LRIQA3Kzqx4po6x sw9tdy1gkW8s+i477NdUVZ38oA== -----END CERTIFICATE-----Generated at Sun Nov 15 11:54:51 2026 by rpki-client